Apple Safari / WebKit DoS
Published:		17.09.2009
Source:		STUDENTMATI
SecurityVulns ID:		10243
Type:		client
Level:		5/10
Description:		NULL pointer dereference on submitting form with empty select list <form> <select name="kill"><optgroup></optgroup></select> <input type="submit"> </form>

Affected:

APPLE : Safari 4.0

Original document

student_mati_(at)_front.ru, Apple Safari 4.0.3 null pointer reference (17.09.2009)

Files:		Apple Safari 4.0.3 null pointer dereference exploit
Discuss:		Read or add your comments to this news (0 comments)

nginx DNS cache poisoning
Published:		17.09.2009
Source:		BUGTRAQ
SecurityVulns ID:		10246
Type:		remote
Level:		5/10
Description:		Invalid implementation of caching algorithm.

Affected:

NGINX : nginx 0.7

Original document

Matthew Dempsky, nginx internal DNS cache poisoning (17.09.2009)

Discuss:

Read or add your comments to this news (0 comments)

HP-UX bootpd DoS
Published:		17.09.2009
Source:		BUGTRAQ
SecurityVulns ID:		10244
Type:		remote
Level:		5/10

Affected:		HP : HP-UX 11.11
		HP : HP-UX 11.23
		HP : HP-UX 11.31
CVE:		CVE-2009-2679 (Unspecified vulnerability in bootpd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause a denial of service via unknown attack vectors.)

Original document

HP, [security bulletin] HPSBUX02458 SSRT090104 rev.1 - HP-UX Running bootpd, Remote Denial of Service (DoS) (17.09.2009)

Discuss:

Read or add your comments to this news (0 comments)

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		17.09.2009
Source:		BUGTRAQ
SecurityVulns ID:		10245
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:

RADACTIVE : I-Load 2008.2

Original document

Daniel Fabian, SEC Consult SA-20090917-0 :: RADactive I-Load Multiple Vulnerabilities (17.09.2009)

Discuss:

Read or add your comments to this news (0 comments)

QuickSoft EasyMail ActiveX buffer overflow
Published:		17.09.2009
Source:		BUGTRAQ
SecurityVulns ID:		10247
Type:		client
Level:		5/10
Description:		Buffer overflows in connect() and AddAttachment() methods.

Affected:

QUICKSOFT : EasyMail 6.0

Original document		Sebastian Wolfgarten, Quiksoft EasyMail 6 (AddAttachment) Remote Buffer Overflow Exploit (17.09.2009)
		Sebastian Wolfgarten, Quiksoft EasyMail 6.0.3.0 imap connect() ActiveX stack overflow exploit (17.09.2009)

Files:		Quiksoft EasyMail 6 (AddAttachment) Remote Buffer Overflow Exploit
		Quiksoft EasyMail 6.0.3.0 imap connect() ActiveX stack overflow exploit
Discuss:		Read or add your comments to this news (0 comments)